Multiple PHP bugs updated since 16.12.2004
Published:		23.12.2004
Source:		BUGTRAQ
SecurityVulns ID:		4272
Type:		library
Level:		7/10
Description:		Integer overflow leading to memory content leak, safe mode protection bypass, openlog() buffer overflow, etc.

Affected:		PHP : PHP 4.3
		PHP : PHP 5.0

Original document		The Warlock, PHP v4.3.x exploit for Windows. (23.12.2004)
		Stefano Di Paola, PHP shmop.c module permits write of arbitrary memory. (21.12.2004)
		bad boy, phphpbb2 + php version < 4.3.10 unserialize() memory dump sql password from config.php exploit (18.12.2004)
		Daniel Fabian, PHP Input Validation Vulnerabilities (16.12.2004)
		Martin Eiszner, php unserialize (16.12.2004)
		PHP1, Advisory 01/2004: Multiple vulnerabilities in PHP 4/5 (16.12.2004)

Files:		PHP openlog() Windows local exploit
		PHP shmop safe mode bypass exploit
Discuss:		Read or add your comments to this news (0 comments)